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IN THE CLAIMS : 

Amended claims follow. 

1 . (Previously Amended) A method for management of network access on a per 
application basis, comprising: 

(a) selecting applications from a group of applications adapted for working in 
conjunction with a first application program interface to gain access to a 
network, the first application program interface adapted for permitting the 
applications to gain access to the network; 

(b) installing a second application program interface adapted for precluding the 
applications from accessing the network; and 

(c) wrapping the selected applications for allowing the selected applications to 
access the network via the second application program interface, where the 
selected applications would otherwise be precluded network access by the 
second application program interface. 

2. (Previously Amended) The method as recited in claim 1, wherein the 
selected applications are wrapped with a wrapper adapted for compressing 
data in a portable executable (PE) image that provides compression of data 
associated with the applications. 

3. (Original) The method as recited in claim 2, wherein the wrapper equips the 
compressed data with extractor code adapted for extracting the data in the PE 
image. 

4. (Original) The method as recited in claim 3, wherein the extractor code is 
further adapted for interfacing with the second application program interface. 

5. (Original) The method as recited in claim 2, wherein the wrapper is further 
adapted for identifying a location in memory. 
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6. (Original) The method as recited in claim 5, wherein the location in memory 
is where a routine is stored for allowing the selected applications to access 
the network. 

7. (Original) The method as recited in claim 1, and further comprising allowing 
a user to select the applications to be allowed to access the network via the 
second application program interface. 

8. (Previously Amended) A computer program product for management of 
network access on a per application basis, comprising: 

(a) computer code for selecting applications from a group of applications 
adapted for working in conjunction with a first application program interface 
to gain access to a network, the first application program interface adapted 
for permitting the applications to gain access to the network; 

(b) computer code for installing a second application program interface adapted 
for precluding the applications from accessing the network; and 

(c) computer code for wrapping the selected applications for allowing the 
selected applications to access the network via the second application 
program interface, where the selected applications would otherwise be 
precluded network access by the second application program interfece. 

9. (Previously Amended) The computer program product as recited in claim 8, 
wherein the selected applications are wrapped with a wrapper adapted for 
compressing data in a portable executable (PE) image that provides 
compression of data associated with the applications. 

10. (Original) The computer program product as recited in claim 9, wherein the 
wrapper equips the compressed data with extractor code adapted for 
extracting the data in the PE image. 

1 1 . (Original) The computer program product as recited in claim 1 0, wherein die 
extractor code is further adapted for interfacing with the second application 
program interface. 
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12. (Original) The computer program product as recited in claim 9, wherein the 
wrapper is further adapted for identifying a location in memory. 

13. (Original) The computer program product as recited in claim 12, wherein the 
location in memory is where a routine is stored for allowing the selected 
applications to access the network. 

14. (Original) The computer program product as recited in claim 8, and further 
comprising computer code for allowing a user to select the applications to be 
allowed to access the network via the second application program interface. 

15. (Previously Amended) A system for management of network access on a per 
application basis, comprising: 

(a) logic for selecting applications from a group of applications adapted for 
working in conjunction with a first application program interface to gain 
access to a network, the first application program interface adapted for 
permitting the applications to gain access to the network; 

(b) logic for installing a second application program interface adapted for 
precluding the applications from accessing the network; and 

(c) logic for wrapping the selected applications for allowing the selected 
applications to access the network via the second application program 
interface, where the selected applicatjons would otherwise be precluded 
network access by the second application program interface. 

16. (Previously Amended) The system as recited in claim 1 5, wherein the 
selected applications are wrapped with a wrapper adapted for compressing 
data in a portable executable (PE) image that provides compression of data 
associated with the applications. 

17. (Original) The system as recited in claim 16. wherein the wrapper equips the 
compressed data with extractor code adapted for extracting tiie data in the PE 
image. 
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1 8. (Original) The system as recited in claim 1 7, wherein the extractor code is 
further adapted for interfacing with the second application program interface, 

19. (Original) The system as recited in claim 16, wherein the wrapper is further 
adapted for identifying a location in memory. 

20. (Original) The system as recited in claim 19, wherein the location in memory 
is where a routine is stored for allowing the selected applications to access 
the network. 

2 1 . (Original) The system as recited in claim 1 5, and further comprising logic for 
allowing a user to select the applications to be allowed to access the network 
via the second application program interface. 

22. (Previously Amended) A system for management of network access on a per 
application basis, comprising: 

(a) means for selecting applications from a group of applications adapted for 
working in conjunction with a first application program interface to gain 
access to a network, the first application program interface adapted 
permitting the applications to gain access to the network; 

(b) means for installing a second application program interface adapted for 
precluding the applications from accessing the network; and 

(c) means for wrapping the selected applications for allowing the selected 
applications to access the network via the second application program 
interface, where the selected applications would otherwise be precluded 
nenvork access by the second application program interface. 

23 (Previously Amended) A data structure stored in memory for management of 

network access on a per application basis, comprising: 
(a) application program interface object for precluding a plurality of applications 

from accessing a network, wherein a permitting application program 
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interface is adapted for permitting the applications to gain access to the 
network; and 

(b) a wrapper object for wrapping selected applications for allowing the selected 
applications to access the network via the application program interface 
object, where the selected applications would otherwise be precluded 
network access by the application program interface object. 

24 (Previously Amended) A jnethod for management of network access on a per 
application basis, comprising; 

(a) installing a precluding application program interface adapted for precluding a 
plurality of applications from accessing a network, wherein a permitting 
application program interface is adapted for permitting the applications to 
gain access to the network; and 

(b) wrapping a plurality of selected applications for allowing the selected 
applications to access the network via the precluding application program 
interface, where the selected applications would otherwise be precluded 
network access by the precluding application program interface. 

25. (Previously Presented) The method as recited in claim 2, wherein the PE 
image includes a header, a stub program, a file signature, a , text section 
header, a ,bss section header, a ,rdata section header, and a .debug section 
header. 

26. (Previously Presented) The method as recited in claim I, wherein the 
applications include a word processor application, a database program, a 
browser program, a development tool program, a drawing program, an image 
editing program, and a communication program. 

27. (Previously Presented) The method as recited in claim 1, wherein the second 
application program interface Is adapted for precluding the applications from 
accessing tfie network utilizing a network card. 
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28. (Previously Presented) The method as recited in claim 1, wherein the second 
application program interface includes a modified copy of the first 
application program interlace, 

29. (Previously Presented) The method as recited in claim I , wherein the second 
application program interface is separate from the first application program 
interface. 
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